How to verify Host Integrity status via the registry

Products

• Endpoint Protection
• Endpoint Security

Issue/Introduction

You need to check the status of Host Integrity (HI) in registry.

Resolution

For Symantec Endpoint Protection (SEP) clients older than 14.3 RU5, the registry value "HIEngineResult" allows you to see the current state of the host integrity check.

1. 32-bit: [HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\SMC]
2. 64-bit: [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC]

• HIEngineResult = 0 (Host integrity policy not assigned)
• HIEngineResult = 1 (Host integrity check pending)
• HIEngineResult = 2 (Host integrity check passed)
• HIEngineResult = 3 (Host integrity check failed)

In SEP 14.3 RU5 and later, even if the system is a 64-bit OS, you can check the same registry under HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\SMC.

Additional Information

Endpoint Protection components required for Host Integrity functionality.